116 matches found
CVE-2023-0577
CVE-2023-0577 involves ASOS Information Technologies’ SOBIAD before version 23.02.01. The root cause is improper neutralization of input during web page generation, resulting in a Cross-site Scripting (XSS) vulnerability. Affected component is SOBIAD’s input handling/rendering path prior to 23.02...
CVE-2023-0577 Multiple XSS in ASOS Information Technologies' Sobiad
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies SOBIAD allows Cross-Site Scripting XSS. This issue affects SOBIAD: before 23.02.01...
CVE-2023-0577 Multiple XSS in ASOS Information Technologies' Sobiad
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies SOBIAD allows Cross-Site Scripting XSS. This issue affects SOBIAD: before 23.02.01...
[SECURITY] [DLA 2950-1] python-scrapy security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2950-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 16, 2022 https://wiki.debian.org/LTS -...
Debian DLA-2950-1 : python-scrapy - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2950 advisory. It was found that Scrapy, a framework for extracting data from websites, could send HTTP Authorization as well as cookies to other domains in case of redirections,...
CVE-2022-0577
creationtimestamp| type| source ---|---|--- 2022-03-02 07:24:42+00:00| seen| https://t.me/cibsecurity/38286...
CVE-2022-0577
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...
CVE-2022-0577
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...
2adif (=0.1.0), addgene-mcp (>=0.1.0 <=0.1.3) +568 more potentially affected by CVE-2022-0577 via scrapy (>=1.3.3 <=2.6.0)
scrapy PYPI version =1.3.3, =0.1.0, =0.10.0, =0.0.1, =0.4.0, =0.1.4, =1.0.0, =0.0.1, =1.0.0, =0.0.24, =2.9.3, =0.2.3, =0.3.7 and more Source cves: CVE-2022-0577 Source advisory: OSV:PYSEC-2022-159...
CVE-2022-0577
CVE-2022-0577 affects Scrapy (scrapy/scrapy) prior to 2.6.1, where sensitive information could be exposed to an unauthorized actor. Public sources describe leakage related to redirections where HTTP Authorization headers and cookies may be sent to unintended domains. Several connected advisories ...
CVE-2022-0577 Exposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapy
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...
CVE-2022-0577
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...
article-extract (>=0.1.2 <=0.1.3), bookscrape (>=0.0.1.dev1 <=0.0.2b7) +19 more potentially affected by CVE-2022-0577 via scrapy (>=1.3.3 <=1.8.0)
scrapy PYPI version =1.3.3, =0.1.2, =0.0.1.dev1, =1.2.1.20160901, =0.0.5, =0.0.20, =0.9.3, =0.0.1, =1.0.0, =1.0.0, =1.7.2, =1.1.0, =0.1.0, =0.2.3, =0.0.1, =0.1.5, =0.1.8 and more Source cves: CVE-2022-0577 Source advisory: OSV:GHSA-CJVR-MFJ7-J4J8...
2adif (=0.1.0), addgene-mcp (>=0.1.0 <=0.1.3) +552 more potentially affected by CVE-2022-0577 via scrapy (>=2.0.1 <=2.6.0)
scrapy PYPI version =2.0.1, =0.1.0, =0.10.0, =0.0.1, =0.4.0, =0.1.4, =1.0.0, =0.0.1, =1.0.0, =0.0.24, =2.9.3, =0.2.3, =0.3.7 and more Source cves: CVE-2022-0577 Source advisory: OSV:GHSA-CJVR-MFJ7-J4J8...
SUSE: Security Advisory (SUSE-SU-2022:0577-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2014-0448)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-0577
CVE-2021-0577 affects the Android flv extractor component. The issue is described as an out-of-bounds write caused by a heap buffer overflow, leading to local privilege escalation with no additional execution privileges required and no user interaction needed. The vulnerability is labeled high se...
CentOS 8 : thunderbird (CESA-2020:0577)
The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:0577 advisory. - Mozilla: Message ID calculation was based on uninitialized data CVE-2020-6792 - Mozilla: Out-of-bounds read when processing certain email messages...